Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
File: gzdbQ66KU9SMiIZx5n_Be_J_K34.mft (raw, json)
Hash identifier: uKthfdxdXAajpWIv8ypP5kc8ge1lHgm5V97lFg8yR/Y=
Subject key identifier: 31:91:09:52:E6:80:70:91:4E:AE:84:77:86:EE:DA:9E:D7:63:5C:40
Authority key identifier: 83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
Certificate issuer: /CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Certificate serial: 019D39AF63A757D4CE82CC9C5BB62DA72594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 13:01:28 +0000
Manifest this update: Sun 29 Mar 2026 13:01:28 +0000
Manifest next update: Mon 30 Mar 2026 13:01:28 +0000
Files and hashes: 1: GUI2iyS6cXbhnTIBOOmswbrKBR4.roa (hash: BhZ7NYLsNrafw61nMLVYDa+lwZAq7nN5BNqq/DyfVgw=)
2: Ry4GJllYI5DHvB5rPooA3w1oNc0.roa (hash: PYYgRq8HSZWN2KMVkiANk0IFKEKURPi6wZnpn5G5E7U=)
3: gzdbQ66KU9SMiIZx5n_Be_J_K34.crl (hash: 3g7g1+TlaSedQ4efexfNHNsEENaEQrHRPe8HnGnc7Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:63:a7:57:d4:ce:82:cc:9c:5b:b6:2d:a7:25:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Validity
Not Before: Mar 29 13:01:28 2026 GMT
Not After : Mar 30 13:01:28 2026 GMT
Subject: CN=31910952e68070914eae847786eeda9ed7635c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6e:f8:94:5f:6c:1b:14:42:69:26:fe:e8:37:
65:bb:71:d3:dd:f5:26:26:93:31:c0:33:a4:0f:b8:
94:08:df:08:70:52:83:9b:ea:bb:48:73:1b:c4:3d:
60:12:5f:48:b6:c7:f7:e8:fe:9b:e3:2c:79:cf:71:
5b:7b:d0:cb:ce:7f:46:ed:d8:50:00:ce:a4:7e:97:
d0:70:a6:e4:2f:de:86:85:f6:e9:3e:d4:a1:76:c6:
3b:1c:0d:5a:5e:0c:f9:47:19:29:36:29:b5:98:a2:
bf:a3:a7:8d:1c:f9:c2:e5:61:1b:0e:05:79:a1:a1:
6e:0f:ee:81:4d:97:19:44:07:9d:0b:ad:93:60:fa:
10:ce:6e:70:2f:5b:9b:5e:0f:55:ad:7e:d3:16:ad:
aa:c1:95:33:38:07:67:4e:90:0f:19:c4:67:6e:07:
e4:f5:e0:b7:d7:28:2c:7e:29:4c:5f:c0:7b:00:e4:
4c:84:12:14:21:ff:7b:3a:52:e3:ef:99:e2:7c:b4:
ff:07:b5:20:7c:55:38:91:18:77:e0:c3:63:57:5f:
9d:ac:a7:2e:de:c1:28:84:be:13:be:5c:ff:86:ee:
5d:9b:a0:8f:3d:80:88:10:61:60:ac:75:52:52:84:
81:ab:a3:58:3a:10:ae:6b:da:6f:ff:d2:42:f5:92:
11:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:91:09:52:E6:80:70:91:4E:AE:84:77:86:EE:DA:9E:D7:63:5C:40
X509v3 Authority Key Identifier:
keyid:83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1e:e9:bb:10:6a:ab:77:a6:80:9e:77:57:85:a4:66:60:97:
76:1a:e4:2d:da:6a:18:42:a8:96:04:cc:1e:5b:cd:f0:1b:fb:
3d:b2:d4:61:f2:10:92:c3:2a:d5:71:1e:1a:e5:87:ca:2c:ca:
e2:49:33:50:23:cd:0c:da:92:fb:aa:80:9f:27:fd:85:7e:12:
e6:a6:a1:4a:6a:94:12:b9:9c:09:44:08:f5:0a:52:51:46:5c:
be:20:1e:98:f7:02:f8:5f:50:4c:27:64:45:15:34:6a:3e:90:
b0:95:dc:90:69:71:90:c0:3f:e4:65:1a:12:26:67:3c:02:7b:
c4:ef:e6:78:29:57:2a:95:70:ca:c8:93:24:24:65:b5:ad:e1:
12:ca:85:e2:cb:9c:ca:de:4e:41:48:3c:a6:a6:f6:0f:b3:7d:
02:a2:a2:13:80:e1:c0:5e:7f:b4:7a:39:da:38:34:7b:f7:7f:
fc:28:96:18:8b:74:2c:b5:58:d5:ab:e0:91:8f:a2:9b:fb:22:
61:22:be:bf:54:70:06:c7:0a:07:21:76:19:6d:41:92:49:32:
8f:5a:fa:82:5f:5f:f5:f3:47:11:51:98:61:18:ac:cd:57:4a:
17:c8:b9:4a:b4:c5:b1:6c:5c:4a:f4:5a:d0:e6:8a:e4:39:93:
05:43:47:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:38 2026 by rpki-client